Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit fa2b0a38 authored by Tony Mak's avatar Tony Mak Committed by android-build-team Robot
Browse files

clearCallingIdentity before calling into getPackageUidAsUser 

Fix: 70585244
Bug: 69981755

Test: Enable any accessibility service -> inflate work profile
      -> Tap on any work app -> no longer crash

Test: cts-tradefed run cts-dev --module DevicePolicyManager --test com.android.cts.devicepolicy.CrossProfileAppsHostSideTest.testPrimaryUserToManagedProfile
Change-Id: I80d18f4e2ab76a228cb0aa2c8312c323a9b5c84d
(cherry picked from commit 857326e3)
parent 090a4ab7

services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java

+3 −0
Original line number Diff line number Diff line
@@ -4566,11 +4566,14 @@ public class AccessibilityManagerService extends IAccessibilityManager.Stub { 
        }



        private boolean isValidPackageForUid(String packageName, int uid) {

            final long token = Binder.clearCallingIdentity();

            try {

                return uid == mPackageManager.getPackageUid(

                        packageName, UserHandle.getUserId(uid));

            } catch (PackageManager.NameNotFoundException e) {

                return false;

            } finally {

                Binder.restoreCallingIdentity(token);

            }

        }